Supposedly this comes in through Automatic Updates. Some people let Automatic Updates do a full non-supervised automated update. It also shows up as a Critical Update; so, you think if it is Critical you need to install. I just love how the honest users have to pay for the dishonest ones. Shouldn't it be the other way around?